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DETAILED ACTION 

Response to Amendment 

This office action is in response to amendment filed on July 26, 2006. Original 
application contained Claims 1-15. Applicant currently amended Claims 1, 5, 7, 9, and 14. The 
amendment filed on July 26, 2006 have been entered and made of record. Therefore, presently 
pending claims are 1 - 1 5 . 

Continued Examination Under 37 CFR LI 14 
1 . A request for continued examination under 37 CFR 1.114, including the fee set forth in 
37 CFR 1.17(e), was filed in this application after final rejection. Since this application is 
eligible for continued examination under 37 CFR 1.1 14, and the fee set forth in 37 CFR 1.17(e) 
has been timely paid, the finality of the previous Office action has been withdrawn pursuant to 
37 CFR 1.1 14. Applicant's submission filed on July 26, 2006 has been entered. 



Response to Arguments 

Applicant's arguments filed on July 26, 2006 have been fully considered but they are not 
persuasive because of the following reasons: 

Regarding Claims 1-15 applicants argued that the system of cited prior arts 
[Gutman et al. U. S. Patent 6,298,383, further in view of Purpura (U. S. Patent 6,421,768),] 
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Purpura does describe an authentication cookie (col. 3, line 51-59). Purpura describes that the 
authentication cookie is transmitted to the user's computer (col. 3, line 64). Purpura also 
describes that the server issuing the authentication cookie provides a second server with the 
public key used to encrypt the authentication cookie (col. 4, line 4-15). However, there is no 
teaching or suggestion that the authentication cookie (authentication result) is cached on the 
second server. Gutman adds nothing to Purpura. Accordingly, the combination of Gutman and 
Purpura provides no teaching or suggestion of "caching said authentication result on at least one 
of said authentication servers registered in said distributed network". 

Examiner respectfully disagree, the system of Gutman and Purpura teaches single 
database which hosts both proxy service data and authentication, authorization and accounting 
(AAA) data, securely transfer user authentication from one web site to another web site using 
cryptographically assured cookies, to make interaction of user with other web sites without re 
authenticating himself. Thus voids need for the user to remember authentication information 
such as user names and user passwords for each business web site. The user authentication 
information is transferred easily, seamlessly and securely, thus facilitating reliable transactions in 
which user is not necessary to know the other web sites or the user is not inconvenienced by 
having to separately authenticate himself. 

In response to applicant's argument that there is no suggestion to combine the references, the 
examiner recognizes that obviousness can only be established by combining or modifying the 
teachings of the prior art to produce the claimed invention where there is some teaching, 
suggestion, or motivation to do so found either in the references themselves or in the knowledge 
generally available to one of ordinary skill in the art. See In re Fine, 837 F.2d 1071, 5 
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USPQ2d 1596 (Fed. Cir. 1988)and/« re Jones, 958 F.2d 347, 21 USPQ2d 1941 (Fed. Cir. 1992). 
In this case, Purpura discloses computing environment that relates to systems and method for 
securely transferring user authentication information from a first computer to a second computer 
to allow the user to seamlessly interact with the second computer without necessarily re- 
authenticating himself thereto. Therefore, It would have been obvious to one ordinary skilled in 
the art at the time of invention to combine the teachings of Gutman and Purpura, because 
Purpura's system of access management for user authentication information from a first 
computer to one or more other computers to allow the user to interact with the other computers 
without necessarily having to explicitly identify himself would not only provide distributed 
single authentication valid on federated system of servers but would also make the authentication 
of user in distributed environment more secure because authentication service of proposed 
system, DNS look-up will not be centrally monitored thus will not consulted a global look-up 
table to find the location of the underlying authentication servers (Purpura: coL2 line 15 to line 
65). 

As a result, cited prior art does implement and teach a system that relates to a system and 
method for distributed authentication service. 

Applicants clearly have failed to explicitly identify specific claim limitations, which 
would define a patentable distinction over prior arts. 

The examiner is not trying to teach the invention but is merely trying to interpret the 
claim language in its broadest and reasonable meaning. The examiner will not interpret to read 
narrowly the claim language to read exactly from the specification, but will interpret the claim 
language in the broadest reasonable interpretation in view of the specification. Therefore, the 



Application/Control Number: 1 0/086, 1 04 Page 5 

Art Unit: 2131 

examiner asserts that cited prior art(s) does teach or suggest the subject matter recited in 
independent and dependent claims. Accordingly, rejections for claims 1-15 are respectfully 
maintained. 



Claim Rejections - 35 USC § 103 
The following is a quotation of 35 U.S.C 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 



5. Claims 1-15 is rejected under 35 U.S.C. 103(a) as being unpatentable over Gutman et al. 
U. S. Patent 6,298,383, further in view of Purpura (U. S. Patent 6,421,768), hereafter referred to 
as Purpura. 

1 . Regarding Claim 1 Gutman teach and describe a distributed network (Fig. 6-8) which is 
registered with a unique domain name, said network comprising a number of clients and a 
number of authentication servers, said clients and said authentication servers being 
communicatively coupled to each other via a global telecommunication network, each of said 
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authentication servers having a fully qualified domain name which is a local host name with said 
unique domain name appended (col.4 line 20 to line 52), 

a distributed authentication system, wherein a given user enters a global user identification 
(GUID) and a password for authentication to be carried out at a target authentication server, said 
GUID comprising a user name, a delimitation symbol, and a domain portion which is same as the 
local host name of said target authentication server (coL7 line 62 to col.8 line 35), 

said distributed authentication system comprising: means for parsing an entered GUID 
and extracting said domain portion therefrom; means for appending said unique domain to said 
domain portion to form a fully qualified domain name (formed FQDN); means for translating 
said FQDN to an Internet Protocol (IP) address representing said target authentication server; 
means for sending said user name and password to said target authentication server for 
authentication (col.8 line 36 to coL9 line 54). 

Although the system disclosed by Gutman shows all the features of the claimed 
limitation, of a distributed authentication service, where the system keys on the domain portion 
of the global user identification (GUID), parsing the entered GUID, and redirecting the 
submission to the appropriate authentication server. Thus rather than consulting a global lookup 
table, the domain portion of the GUID is pre-pended to a central host domain, i.e., the distributed 
authentication system's domain, and the domain name system (DNS) is consulted to find location 
of the authentication servers. But Gutman does not specifically disclose servicing of the 
authentication, such as password checking, distributed among the participants of the 
authentication that the system supports. 
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In an analogous art, Purpura on the other hand discloses computing environment that relates to 
systems and method for securely transferring user authentication information from a first 
computer to a second computer to allow the user to seamlessly interact with the second computer 
without necessarily re-authenticating himself thereto. 

means for carrying out said authentication at the target authentication server and 
generating an authentication result that is recognizable by all authentication servers registered in 
said distributed network; responsive to said generating said authentication result, means for 
distributing and caching said authentication result on at least one of said authentication servers 
registered in said distributed network (col. 2 line 17 to line 44, col.3 line 38 to line 48, and col.5 
line 45 to line 62). 

Therefore, It would have been obvious to one ordinary skilled in the art at the time of 
invention to combine the teachings of Gutman and Purpura, because Purpura' s system of access 
management for user authentication information from a first computer to one or more other 
computers to allow the user to interact with the other computers without necessarily having to 
explicitly identify himself would not only provide distributed single authentication valid on 
federated system of servers but would also make the authentication of user in distributed 
environment more secure because authentication service of proposed system, DNS look-up will 
not be centrally monitored thus will not consulted a global look-up table to find the location of 
the underlying authentication servers (Purpura: col.2 line 15 to line 65). 
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2. Regarding Claim 5 Gutman teach and describe a method for providing distributed 
authentication service (Fig. 6-13), wherein a given user enters a global user identification 
(GUID) and a password for authentication to be carried out at a target authentication server, said 
GUID comprising a user name, a delimitation symbol, and a domain portion which is same as the 
local host name of said target authentication server (col.7 line 62 to col. 8 line 35), 
said method comprising the computer-implemented steps of: entering the user's GUID and 
password; parsing said entered GUID and extracting said domain portion from said GUID; 
appending a unique domain name to said domain portion to form a fully qualified domain name 
(FQDN); looking up said FQDN in a domain name system (DNS) to obtain an address 
representing said target authentication server; sending said user name and password to said target 
authentication server for authentication; carrying out said authentication at the target 
authentication server and generating an authentication result that is recognizable by all 
authentication servers registered in said distributed network; responsive to said generating said 
authentication result (col.7 line 62 to col.8 line 35). 

Although the system disclosed by Gutman shows all the features of the claimed 
limitation, of a distributed authentication service, where the system keys on the domain portion 
of the global user identification (GUID), parsing the entered GUID, and redirecting the 
submission to the appropriate authentication server. Thus rather than consulting a global lookup 
table, the domain portion of the GUID is pre-pended to a central host domain, i.e., the distributed 
authentication system's domain, and the domain name system (DNS) is consulted to find location 
of the authentication servers. But Gutman does not specifically disclose servicing of the 
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authentication, such as password checking, distributed among the participants of the 
authentication that the system supports. 

In an analogous art, Purpura on the other hand discloses computing environment that relates to 
systems and method for securely transferring user authentication information from a first 
computer to a second computer to allow the user to seamlessly interact with the second computer 
without necessarily re-authenticating himself thereto. 

means for carrying out said authentication at the target authentication server and 
generating an authentication result that is recognizable by all authentication servers registered in 
said distributed network; responsive to said generating said authentication result, means for 
distributing and caching said authentication result on at least one of said authentication servers 
registered in said distributed network (col. 2 line 17 to line 44, col.3 line 38 to line 48, and col.5 
line 45 to line 62). 

Therefore, It would have been obvious to one ordinary skilled in the art at the time of 
invention to combine the teachings of Gutman and Purpura, because Purpura' s system of access 
management for user authentication information from a first computer to one or more other 
computers to allow the user to interact with the other computers without necessarily having to 
explicitly identify himself would not only provide distributed single authentication valid on 
federated system of servers but would also make the authentication of user in distributed 
environment more secure because authentication service of proposed system, DNS look-up will 
not be centrally monitored thus will not consulted a global look-up table to find the location of 
the underlying authentication servers (Purpura: col.2 line 15 to line 65). 
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3. Regarding Claim 7 Gutman teach and describe a distributed network which is registered 
with a unique domain name, said network (Fig. 6-8), comprising a number of clients and a 
number of authentication servers, said clients and said authentication servers being 
communicatively coupled to each other via a global telecommunications network, each of said 
authentication servers having a fully qualified domain name which is a local host name with said 
unique domain name appended (col.4 line 20 to line 52), 

a method for providing distributed authentication service, wherein a given user enters a global 
user identification (GUID) and a password for authentication to be carried out at a target 
authentication server, said GUID comprising a user name, a delimitation symbol and a domain 
portion which is same as the local host name of said target authentication server (col. 7 line 62 to 
col.8 line 35), 

said method comprising the steps of: entering the user's GUID and password; parsing entered 
GUID and extracting said domain portion from said GUID; appending said unique domain name . 
to said domain portion to form a fully qualified domain name (FQDN); checking a local list of 
registered fully qualified domain names (FQDN) to obtain an Internet Protocol (IP) address for 
said target authentication server, wherein each FQDN in said local list is mapped to a unique IP 
address; sending said user name and password to said target authentication server for 
authentication; carrying out said authentication at the target authentication server and generating 
an authentication result that is recognizable by all authentication servers registered in said 
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distributed network; and responsive to said generating said authentication result (coL8 line 36 to 
coL9 line 54). 

Although the system disclosed by Gutman shows all the features of the claimed 
limitation, of a distributed authentication service, where the system keys on the domain portion 
of the global user identification (GUID), parsing the entered GUID, and redirecting the 
submission to the appropriate authentication server. Thus rather than consulting a global lookup 
table, the domain portion of the GUID is pre-pended to a central host domain, i.e., the distributed 
authentication system's domain, and the domain name system (DNS) is consulted to find location 
of the authentication servers. But Gutman does not specifically disclose servicing of the 
authentication, such as password checking, distributed among the participants of the 
authentication that the system supports. 

In an analogous art, Purpura on the other hand discloses computing environment that relates to 
systems and method for securely transferring user authentication information from a first 
computer to a second computer to allow the user to seamlessly interact with the second computer 
without necessarily re-authenticating himself thereto. 

means for carrying out said authentication at the target authentication server and 
generating an authentication result that is recognizable by all authentication servers registered in 
said distributed network; responsive to said generating said authentication result, means for 
distributing and caching said authentication result on at least one of said authentication servers 
registered in said distributed network, (col. 2 line 17 to line 44, col.3 line 38 to line 48, and col.5 
line 45 to line 62). 
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Therefore, It would have been obvious to one ordinary skilled in the art at the time of 
invention to combine the teachings of Gutman and Purpura, because Purpura' s system of access 
management for user authentication information from a first computer to one or more other 
computers to allow the user to interact with the other computers without necessarily having to 
explicitly identify himself would not only provide distributed single authentication valid on 
federated system of servers but would also make the authentication of user in distributed 
environment more secure because authentication service of proposed system, DNS look-up will 
not be centrally monitored thus will not consulted a global look-up table to find the location of 
the underlying authentication servers (Purpura: col.2 line 15 to line 65). 

4. Regarding Claim 9 Gutman teach and describe a distributed network which is registered 
with a unique domain name (Fig. 6-8), said network comprising a number of clients and a 
number of authentication servers, said clients and said authentication servers being 
communicatively coupled to each other via a global telecommunications network, each of said 
authentication servers having a fully qualified domain name which is a local host name with said 
unique domain name appended (coL4 line 20 to line 52), 

a method for providing distributed authentication service, wherein a given user enters a global 
user identification (GUID) and a password for authentication to be carried out at a target 
authentication server, said GUID comprising a user name, a delimitation symbol and a domain 
portion which is same as the local host name of said target authentication server (col.7 line 62 to 
col.8 line 35), 
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said method comprising the computer-implemented steps of: entering the user's GUID and 
password; parsing said GUID and extracting said domain portion; appending said unique domain 
name to said domain portion to form a fully qualified domain name (FQDN) in said unique 
domain; checking a local list of registered fully qualified domain names (RFQDN) to obtain an 
Internet Protocol (IP) address for said target authentication server, wherein each RFQDN in said 
local list is mapped to a unique IP address; if said step of checking fails, looking up a domain 
name system (DNS) to obtain an Internet Protocol (IP) address representing said FQDN; sending 
said user name and password to said target authentication server for authentication; carrying out 
said authentication at the target authentication server and generating an authentication result that 
is recognizable by all authentication servers registered in said distributed network; and 
responsive to said generating said authentication result (col.8 line 36 to col.9 line 54). 

Although the system disclosed by Gutman shows all the features of the claimed 
limitation, of a distributed authentication service, where the system keys on the domain portion 
of the global user identification (GUID), parsing the entered GUID, and redirecting the 
submission to the appropriate authentication server. Thus rather than consulting a global lookup 
table, the domain portion of the GUID is pre-pended to a central host domain, i.e., the distributed 
authentication system's domain, and the domain name system (DNS) is consulted to find location 
of the authentication servers. But Gutman does not specifically disclose servicing of the 
authentication, such as password checking, distributed among the participants of the 
authentication that the system supports. 

In an analogous art, Purpura on the other hand discloses computing environment that relates to 
systems and method for securely transferring user authentication information from a first 
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computer to a second computer to allow the user to seamlessly interact with the second computer 
without necessarily re-authenticating himself thereto. 

means for carrying out said authentication at the target authentication server and 
generating an authentication result that is recognizable by all authentication servers registered in 
said distributed network; responsive to said generating said authentication result, means for 
distributing and caching said authentication result on at least one of said authentication servers 
registered in said distributed network, (col. 2 line 17 to line 44, col.3 line 38 to line 48, and col.5 
line 45 to line 62). 

Therefore, It would have been obvious to one ordinary skilled in the art at the time of 
invention to combine the teachings of Gutman and Purpura, because Purpura' s system of access 
management for user authentication information from a first computer to one or more other 
computers to allow the user to interact with the other computers without necessarily having to 
explicitly identify himself would not only provide distributed single authentication valid on 
federated system of servers but would also make the authentication of user in distributed 
environment more secure because authentication service of proposed system, DNS look-up will 
not be centrally monitored thus will not consulted a global look-up table to find the location of 
the underlying authentication servers (Purpura: col.2 line 15 to line 65). 

5. Regarding Claim 1 1 Gutman teach and describe a method for providing distributed 
authentication service (Fig. 6-13), wherein a given user enters a global user identification 
(GUID) and a password for authentication to be carried out at a target authentication server, said 
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GUID comprising a user name, a delimitation symbol and said target authentication server's 
domain name (col.7 line 62 to col.8 line 35), 

said method comprising the steps of: entering the user's GUID and password; parsing said 
entered GUID and extracting said target authentication server's domain name; pre-pending said 
common local host name to said target authentication server's domain name to form a fully 
qualified domain name (FQDN); checking a local list of registered fully qualified domain names 
(RFQDN) to obtain an address for said target authentication server, wherein each RFQDN in 
said local is mapped to a unique address; sending said user name and password to said target 
authentication server for authentication; carrying out said authentication at the target 
authentication server and generating an authentication result that is recognizable by all 
authentication servers registered in said distributed network; and responsive to said generating 
said authentication result (col.8 line 36 to col.9 line 54). 

Although the system disclosed by Gutman shows all the features of the claimed 
limitation, of a distributed authentication service, where the system keys on the domain portion 
of the global user identification (GUID), parsing the entered GUID, and redirecting the 
submission to the appropriate authentication server. Thus rather than consulting a global lookup 
table, the domain portion of the GUID is pre-pended to a central host domain, i.e., the distributed 
authentication system's domain, and the domain name system (DNS) is consulted to find location 
of the authentication servers. But Gutman does not specifically disclose servicing of the 
authentication, such as password checking, distributed among the participants of the 
authentication that the system supports. 
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In an analogous art, Purpura on the other hand discloses computing environment that relates to 
systems and method for securely transferring user authentication information from a first 
computer to a second computer to allow the user to seamlessly interact with the second computer 
without necessarily re-authenticating himself thereto. 

means for carrying out said authentication at the target authentication server and 
generating an authentication result that is recognizable by all authentication servers registered in 
said distributed network; responsive to said generating said authentication result, means for 
distributing and caching said authentication result on at least one of said authentication servers 
registered in said distributed network, (col 2 line 17 to line 44, col.3 line 38 to line 48, and col.5 
line 45 to line 62). 

Therefore, It would have been obvious to one ordinary skilled in the art at the time of 
invention to combine the teachings of Gutman and Purpura, because Purpura' s system of access 
management for user authentication information from a first computer to one or more other 
computers to allow the user to interact with the other computers without necessarily having to 
explicitly identify himself would not only provide distributed single authentication valid on 
federated system of servers but would also make the authentication of user in distributed 
environment more secure because authentication service of proposed system, DNS look-up will 
not be centrally monitored thus will not consulted a global look-up table to find the location of 
the underlying authentication servers (Purpura: col.2 line 15 to line 65). 



6. 



Regarding Claim 14 Gutman teach and describe a distributed network comprising a 
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number of clients and a number of authentication servers (Fig. 6-8), said clients and said 
authentication servers being communicatively coupled to each other via a global 
telecommunications network, each of said authentication servers having a fully qualified domain 
name which is a local host name with its domain name appended (col.4 line 20 to line 52), 
a method for providing distributed authentication service, wherein a given user enters a global 
user identification (GUID) and a password for authentication to be carried out at a target 
authentication server, said GUID comprising a user name, a delimitation symbol and said target 
authentication server's domain name (col.7 line 62 to col.8 line 35), 
said method comprising the steps of: entering the user's GUID and password; parsing said 
entered GUID and extracting said target authentication server's domain name; checking a local 
list of domain names to obtain an Internet Protocol (IP) address for said target authentication 
server, wherein each domain name in said list is mapped to a registered authentication server's IP 
address; sending said user name and password to said target authentication server for 
authentication; carrying out said authentication at the target authentication server and generating 
an authentication result that is recognizable by all authentication servers registered in said 
distributed network; responsive to said generating said authentication result (col.8 line 36 to 
col.9 line 54). 

Although the system disclosed by Gutman shows all the features of the claimed 
limitation, of a distributed authentication service, where the system keys on the domain portion 
of the global user identification (GUID), parsing the entered GUID, and redirecting the 
submission to the appropriate authentication server. Thus rather than consulting a global lookup 
table, the domain portion of the GUID is pre-pended to a central host domain, i.e., the distributed 
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authentication system's domain, and the domain name system (DNS) is consulted to find location 
of the authentication servers. But Gutman does not specifically disclose servicing of the 
authentication, such as password checking, distributed among the participants of the 
authentication that the system supports. 

In an analogous art, Purpura on the other hand discloses computing environment that relates to 
systems and method for securely transferring user authentication information from a first 
computer to a second computer to allow the user to seamlessly interact with the second computer 
without necessarily re-authenticating himself thereto. 

means for carrying out said authentication at the target authentication server and 
generating an authentication result that is recognizable by all authentication servers registered in 
said distributed network; responsive to said generating said authentication result, means for 
distributing and caching said authentication result on at least one of said authentication servers 
registered in said distributed network, (col. 2 line 17 to line 44, col.3 line 38 to line 48, and col.5 
line 45 to line 62). 

Therefore, It would have been obvious to one ordinary skilled in the art at the time of 
invention to combine the teachings of Gutman and Purpura, because Purpura' s system of access 
management for user authentication information from a first computer to one or more other 
computers to allow the user to interact with the other computers without necessarily having to 
explicitly identify himself would not only provide distributed single authentication valid on 
federated system of servers but would also make the authentication of user in distributed 
environment more secure because authentication service of proposed system, DNS look-up will 
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not be centrally monitored thus will not consulted a global look-up table to find the location of 
the underlying authentication servers (Purpura: col.2 line 15 to line 65). 



7. Regarding Claims 2-4, 6, 8, 10, 12-13, and 15 are rejected applied as above rejecting 
Claims 1, 5, 7, 9, 1 1, and 14. Furthermore, the system of Gutman and Purpura teaches and 
describes a distributed authentication system, wherein: 

As per Claim 2, further comprising: means for automatically mapping any unrecognized 
FQDN into a default server which carries out authentication on the user's authentication request 
(col 9 line 32 to line 54). 

As per Claim 3, said means for translating consults a domain name system (DNS) to 
obtain an Internet Protocol (IP) address representing said target authentication server (col.5 line 1 
to line 37). 

As per Claim 4, said means for translating consults a local mapping list to obtain an 
Internet Protocol (IP) address representing said target authentication server (col.5 line 1 to line 
17). 

As per Claim 6, 8, and 10 further comprising the steps of: if said step of looking up fails, 
automatically mapping an unrecognized FQDN into a default server which performs 
authentication on the user's authentication request (col.9 line 16 to col. 10 line 11). 

As per Claim 12, further comprising the step of: if said step of checking fails, looking up 
said FQDN in a domain name system (DNS) to obtain an address representing said target 
authentication server (col.9 line 16 to col. 10 line 11). 
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As per Claim 13, further comprising the steps of: if said step of looking up fails, 
automatically mapping an unrecognized FQDN into a default server which performs 
authentication on the user's authentication request (col.9 line 16 to col.10 line 1 1). 

As per Claim 15, further comprising the step of: if said step of checking fails, 
automatically mapping an unrecognized domain name into a default server which performs 
authentication on the user's authentication request (col.9 line 16 to col.10 line 11). 

Conclusion 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Syed Zia whose telephone number is 571-272-3798. The 
examiner can normally be reached on 9:00 to 5:00. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz Sheikh can be reached on 571-272-3795. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). If you would 
like assistance from a USPTO Customer Service Representative or access to the automated 
information system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 




